Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92A34CF2A45411EF8F1F555F762E951A.roa
File: 92A34CF2A45411EF8F1F555F762E951A.roa (raw, json)
Hash identifier: VhSX7au/+AlzMCsFMlGwNgSe61uz/lufHVsUzR27gvY=
Subject key identifier: CF:B9:F8:41:2B:5C:67:25:A2:1F:4C:DE:DD:A0:25:7E:40:DC:12:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92A34CF2A45411EF8F1F555F762E951A.roa
Signing time: Sat 16 Nov 2024 19:54:22 +0000
ROA not before: Sat 16 Nov 2024 19:54:18 +0000
ROA not after: Tue 26 Nov 2024 19:54:18 +0000
asID: 53835
IP address blocks: 156.245.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54246 (0xd3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 19:54:18 2024 GMT
Not After : Nov 26 19:54:18 2024 GMT
Subject: CN=6738f86e-38a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:33:e6:36:1a:92:58:75:c7:08:6f:e2:37:
40:84:b2:2c:b0:e0:a9:d4:e5:3f:b4:d1:ed:cc:1d:
71:6e:db:a6:b0:6d:67:2d:98:70:d0:0d:56:fe:65:
d2:59:b3:27:99:b6:5e:fc:8e:89:5f:43:40:9e:b4:
7f:d4:38:cb:f4:a0:fa:78:d7:22:e4:ad:f4:f6:20:
e3:d5:57:65:3e:27:c2:6d:1a:69:f6:60:b2:b2:43:
23:9e:b6:9a:3e:a3:97:99:bc:5b:7e:54:87:b6:e3:
45:f1:49:7b:ec:55:6c:50:8e:5d:87:9e:2e:ec:eb:
b1:be:a0:5d:76:1e:eb:c4:86:c8:14:07:38:b5:72:
56:5d:2b:47:a2:cd:e1:8f:dd:58:9d:ec:34:a1:5d:
ad:03:70:74:f5:32:5b:03:f3:1c:37:fb:9a:26:0e:
4b:40:d1:5b:3e:52:3c:97:f7:03:05:5e:1c:ab:47:
d5:f8:a4:7e:23:6b:3a:2c:2e:eb:19:06:c2:87:f6:
87:9f:44:d0:c0:ad:79:4f:4f:f2:96:ea:13:16:52:
4b:1c:75:ed:32:9b:e1:48:53:c0:28:d1:e1:bc:68:
8f:de:a3:c6:1a:9a:c0:21:1a:4f:4b:3c:46:e1:2d:
49:d4:4d:64:14:d5:d1:bf:ac:2a:75:5b:33:99:96:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B9:F8:41:2B:5C:67:25:A2:1F:4C:DE:DD:A0:25:7E:40:DC:12:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92A34CF2A45411EF8F1F555F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.190.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d3:d6:73:f7:c6:37:6c:38:48:c5:05:86:c7:68:66:8b:ac:
e3:2a:48:8d:be:5c:f2:cb:6e:f9:a9:a5:b3:34:0d:0b:de:df:
83:5f:bf:c6:47:70:76:eb:ff:ad:bc:df:a7:8b:bf:76:f3:58:
34:93:4f:42:85:65:0f:8d:49:b5:5b:99:e2:bf:ad:4b:07:94:
d0:63:a5:d0:34:0c:99:39:cc:ef:60:4d:6f:d1:26:fb:13:a1:
b9:8e:3b:5e:41:c7:0b:0c:d0:5e:1e:69:44:f2:9a:ce:04:11:
58:0d:4d:da:1c:25:ce:39:8e:8c:bb:ae:47:48:db:59:6d:b2:
21:7f:26:ee:6b:86:55:b1:de:f4:6e:87:12:6d:31:72:9a:35:
ec:88:c5:89:9e:87:4a:c2:05:e6:99:68:26:c5:46:91:69:33:
33:23:d8:b3:ca:af:07:96:8d:7d:d6:fb:f5:6c:12:bf:68:00:
e0:1b:c1:a6:0f:b6:ea:6f:3c:d6:41:2b:49:1d:4c:5c:7f:12:
9a:62:61:f0:52:7a:73:41:4e:60:c4:6c:dd:c9:2c:85:a3:64:
46:35:6c:e9:68:7e:85:f9:db:50:4f:15:b6:46:c5:13:96:0d:
0d:ef:bb:a7:45:66:16:4f:57:fe:5a:19:da:b9:47:44:1b:0f:
01:38:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org